CVE-2024-2408

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request: https://github.com/openssl/openssl/pull/13817 (rsa_pkcs1_implicit_rejection). These changes are part of OpenSSL 3.2 and have also been backported to stable versions of various Linux distributions, as well as to the PHP builds provided for Windows since the previous release. All distributors and builders should ensure that this version is used to prevent PHP from being vulnerable.

PHP Windows builds for the versions 8.1.29, 8.2.20 and 8.3.8 and above include OpenSSL patches that fix the vulnerability.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-203

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-24099.8The MasterStudy LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.1. This is due to i CVE-2024-240919.8Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface.CVE-2024-240927.8SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php.CVE-2024-240939.8SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Up CVE-2024-240959.8Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.CVE-2024-240967.8Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.CVE-2024-240975.4Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News F CVE-2024-240987.8Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.CVE-2024-240995.4Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.CVE-2024-24109.8The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input i CVE-2024-241008.3Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.CVE-2024-241019.8Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update.